CVE-2026-22370: WordPress Marveland theme <= 1.3.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Marveland marveland allows PHP Local File Inclusion.This issue affects Marveland: from n/a through <= 1.3.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-22370?
CVE-2026-22370 has a high severity level due to its potential for PHP Local File Inclusion vulnerabilities.
How do I fix CVE-2026-22370?
To fix CVE-2026-22370, upgrade the axiomthemes Marveland theme to version 1.3.1 or later.
What versions of Marveland are affected by CVE-2026-22370?
CVE-2026-22370 affects the axiomthemes Marveland theme from n/a up to and including version 1.3.0.
What could an attacker do using CVE-2026-22370?
An attacker exploiting CVE-2026-22370 could potentially gain access to sensitive files on the server by performing local file inclusion.
Is authentication required to exploit CVE-2026-22370?
No, authentication is not required to exploit CVE-2026-22370, making it a significant threat.